stage-cli 1.1.1__tar.gz → 1.1.3__tar.gz

{stage_cli-1.1.1 → stage_cli-1.1.3}/.gitignore

@@ -88,5 +88,3 @@ desktop.ini
 $RECYCLE.BIN/
 *.lnk
 
-# Local-only release runbook
-packaging/RELEASING.md

{stage_cli-1.1.1 → stage_cli-1.1.3}/CHANGELOG.md

@@ -4,6 +4,33 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.3] - 2026-09-09
+
+### Fixed
+
+- `doctor` said greenhouse stored nothing on a run that stored 138. A source
+  left out of a run writes a row of zeroes, and the volume check read those as
+  real while discarding every run that deferred a board. Greenhouse defers on
+  all of them. A run counts now only if the source ran, and a deferred run is
+  measured against other deferred runs.
+- Haize Labs and Odin Dynamics are off. Both boards 404 with nowhere to move to.
+  The two internships they published were already quarantined as non-CS.
+- The PyPI page showed no author. A name and an email in one metadata field get
+  folded into a single header, leaving the author line blank.
+
+## [1.1.2] - 2026-09-09
+
+### Fixed
+
+- Job Bank has returned nothing since 31 August. Its server drops the connection
+  on any client offering TLS 1.3, so no request ever reached the board. That one
+  host is capped at TLS 1.2 now. Certificates are still checked and every other
+  board still gets TLS 1.3.
+- A connection that died before the server answered was logged as `ConnectError:`
+  with nothing after the colon, which is why Job Bank looked fine for eight days.
+  The cause is carried through now:
+  `ConnectError: ConnectionResetError: [Errno 54] Connection reset by peer`.
+
 ## [1.1.1] - 2026-09-07
 
 ### Fixed
@@ -94,6 +121,8 @@ them in a SQLite database on your own machine.
 
 Python 3.12, 3.13 or 3.14 on macOS, Linux or Windows.
 
+[1.1.3]: https://github.com/NicholasXydis/Stage/releases/tag/v1.1.3
+[1.1.2]: https://github.com/NicholasXydis/Stage/releases/tag/v1.1.2
 [1.1.1]: https://github.com/NicholasXydis/Stage/releases/tag/v1.1.1
 [1.1.0]: https://github.com/NicholasXydis/Stage/releases/tag/v1.1.0
 [1.0.0]: https://github.com/NicholasXydis/Stage/releases/tag/v1.0.0

{stage_cli-1.1.1 → stage_cli-1.1.3}/PKG-INFO

@@ -1,12 +1,13 @@
 Metadata-Version: 2.5
 Name: stage-cli
-Version: 1.1.1
+Version: 1.1.3
 Summary: Aggregates CS internship postings (Canada/US, EN + FR) into a local SQLite database
 Project-URL: Homepage, https://github.com/NicholasXydis/Stage
 Project-URL: Repository, https://github.com/NicholasXydis/Stage
 Project-URL: Issues, https://github.com/NicholasXydis/Stage/issues
 Project-URL: Changelog, https://github.com/NicholasXydis/Stage/blob/main/CHANGELOG.md
-Author-email: Nicholas Xydis <NicholasXydis@outlook.com>
+Author: Nicholas Xydis
+Maintainer-email: Nicholas Xydis <NicholasXydis@outlook.com>
 License: MIT
 License-File: LICENSE
 Keywords: cli,co-op,internship,python,stage,student,tui
@@ -59,7 +60,7 @@ Free and open source. No account, no server, no telemetry.
 
 ![python](https://img.shields.io/static/v1?label=python&message=3.12%20%7C%203.13%20%7C%203.14&color=4a9eff&logo=python&logoColor=white)
 
-![tests](https://img.shields.io/static/v1?label=tests&message=2%2C408&color=44bb00) ![coverage](https://img.shields.io/static/v1?label=coverage&message=89%25&color=44bb00) [![ci](https://img.shields.io/github/actions/workflow/status/NicholasXydis/Stage/ci.yml?branch=main&label=ci&logo=githubactions&logoColor=white)](https://github.com/NicholasXydis/Stage/actions/workflows/ci.yml)
+![tests](https://img.shields.io/static/v1?label=tests&message=2%2C420&color=44bb00) ![coverage](https://img.shields.io/static/v1?label=coverage&message=89%25&color=44bb00) [![ci](https://img.shields.io/github/actions/workflow/status/NicholasXydis/Stage/ci.yml?branch=main&label=ci&logo=githubactions&logoColor=white)](https://github.com/NicholasXydis/Stage/actions/workflows/ci.yml)
 
 <br>
 
@@ -90,7 +91,7 @@ Internships disappear fast. By the time you find the right posting, hundreds of
 
 Stage scans 1,450+ employer career boards and finds internships CS undergrads in Canada and the U.S. can actually apply to. Every rejected posting is logged with the exact reason it was filtered out.
 
-It has kept **3,577** postings out of **166,298** screened so far.
+It has kept **4,024** postings out of **188,284** screened so far.
 
 ## A look at it
 
@@ -272,7 +273,7 @@ Stage/
 │  ├─ http/                 rate posture, circuit breaker, validator cache
 │  ├─ storage/              SQLite repository, migrations, FTS
 │  └─ data/                 packaged registry (a directory) and lexicons
-├─ tests/                   2,408 tests, 89% branch coverage
+├─ tests/                   2,420 tests, 89% branch coverage
 └─ .github/workflows/       CI, CodeQL, scheduled canary, release
 ```
 
@@ -299,7 +300,7 @@ Stage/
                ▼                               ▼
         ┌─────────────┐                 ┌─────────────┐
         │    jobs     │                 │ quarantine  │
-        │    5,495    │                 │   160,803   │
+        │    6,219    │                 │   182,065   │
         └──────┬──────┘                 └─────────────┘
                │  dedup collapses the same posting across sources
                ▼
@@ -318,7 +319,7 @@ Stage/
 
 | Workflow | File | Purpose |
 | --- | --- | --- |
-| CI | `.github/workflows/ci.yml` | Ruff, format, mypy strict, 2,408 tests, coverage floor, badge drift |
+| CI | `.github/workflows/ci.yml` | Ruff, format, mypy strict, 2,420 tests, coverage floor, badge drift |
 | Supported Pythons | `.github/workflows/ci.yml` | The full suite again on 3.13 and 3.14 |
 | Wheel | `.github/workflows/ci.yml` | Builds and smoke-tests the wheel on Ubuntu, Windows and macOS |
 | CodeQL | `.github/workflows/codeql.yml` | Static analysis for Python and the workflows themselves |

{stage_cli-1.1.1 → stage_cli-1.1.3}/README.md

@@ -20,7 +20,7 @@ Free and open source. No account, no server, no telemetry.
 
 ![python](https://img.shields.io/static/v1?label=python&message=3.12%20%7C%203.13%20%7C%203.14&color=4a9eff&logo=python&logoColor=white)
 
-![tests](https://img.shields.io/static/v1?label=tests&message=2%2C408&color=44bb00) ![coverage](https://img.shields.io/static/v1?label=coverage&message=89%25&color=44bb00) [![ci](https://img.shields.io/github/actions/workflow/status/NicholasXydis/Stage/ci.yml?branch=main&label=ci&logo=githubactions&logoColor=white)](https://github.com/NicholasXydis/Stage/actions/workflows/ci.yml)
+![tests](https://img.shields.io/static/v1?label=tests&message=2%2C420&color=44bb00) ![coverage](https://img.shields.io/static/v1?label=coverage&message=89%25&color=44bb00) [![ci](https://img.shields.io/github/actions/workflow/status/NicholasXydis/Stage/ci.yml?branch=main&label=ci&logo=githubactions&logoColor=white)](https://github.com/NicholasXydis/Stage/actions/workflows/ci.yml)
 
 <br>
 
@@ -51,7 +51,7 @@ Internships disappear fast. By the time you find the right posting, hundreds of
 
 Stage scans 1,450+ employer career boards and finds internships CS undergrads in Canada and the U.S. can actually apply to. Every rejected posting is logged with the exact reason it was filtered out.
 
-It has kept **3,577** postings out of **166,298** screened so far.
+It has kept **4,024** postings out of **188,284** screened so far.
 
 ## A look at it
 
@@ -233,7 +233,7 @@ Stage/
 │  ├─ http/                 rate posture, circuit breaker, validator cache
 │  ├─ storage/              SQLite repository, migrations, FTS
 │  └─ data/                 packaged registry (a directory) and lexicons
-├─ tests/                   2,408 tests, 89% branch coverage
+├─ tests/                   2,420 tests, 89% branch coverage
 └─ .github/workflows/       CI, CodeQL, scheduled canary, release
 ```
 
@@ -260,7 +260,7 @@ Stage/
                ▼                               ▼
         ┌─────────────┐                 ┌─────────────┐
         │    jobs     │                 │ quarantine  │
-        │    5,495    │                 │   160,803   │
+        │    6,219    │                 │   182,065   │
         └──────┬──────┘                 └─────────────┘
                │  dedup collapses the same posting across sources
                ▼
@@ -279,7 +279,7 @@ Stage/
 
 | Workflow | File | Purpose |
 | --- | --- | --- |
-| CI | `.github/workflows/ci.yml` | Ruff, format, mypy strict, 2,408 tests, coverage floor, badge drift |
+| CI | `.github/workflows/ci.yml` | Ruff, format, mypy strict, 2,420 tests, coverage floor, badge drift |
 | Supported Pythons | `.github/workflows/ci.yml` | The full suite again on 3.13 and 3.14 |
 | Wheel | `.github/workflows/ci.yml` | Builds and smoke-tests the wheel on Ubuntu, Windows and macOS |
 | CodeQL | `.github/workflows/codeql.yml` | Static analysis for Python and the workflows themselves |

{stage_cli-1.1.1 → stage_cli-1.1.3}/SECURITY.md

@@ -4,7 +4,7 @@
 
 | Version | Supported |
 | --- | --- |
-| 1.1.1 | ✅ |
+| 1.1.3 | ✅ |
 
 Only the latest release receives security fixes.
 

{stage_cli-1.1.1 → stage_cli-1.1.3}/assets/ci-flow.svg

@@ -22,7 +22,7 @@
 
     <rect x="240" y="42" width="180" height="58" rx="12" fill="#111C30" stroke="#3B82F6" stroke-width="2"/>
     <text x="330" y="66" fill="#F0F6FC" font-size="14">ruff, format, mypy</text>
-    <text x="330" y="86" fill="#F0F6FC" font-size="14">2,408 tests, 89%</text>
+    <text x="330" y="86" fill="#F0F6FC" font-size="14">2,420 tests, 89%</text>
 
     <path d="M420 71H470" stroke="#3B82F6" stroke-width="3" marker-end="url(#arrow)"/>
 

{stage_cli-1.1.1 → stage_cli-1.1.3}/pyproject.toml

@@ -5,7 +5,8 @@ description = "Aggregates CS internship postings (Canada/US, EN + FR) into a loc
 readme = "README.md"
 requires-python = ">=3.12,<3.15"
 license = { text = "MIT" }
-authors = [{ name = "Nicholas Xydis", email = "NicholasXydis@outlook.com" }]
+authors = [{ name = "Nicholas Xydis" }]
+maintainers = [{ name = "Nicholas Xydis", email = "NicholasXydis@outlook.com" }]
 keywords = [
     "internship",
     "stage",

stage_cli-1.1.3/src/stage/__init__.py

@@ -0,0 +1 @@
+__version__ = "1.1.3"

{stage_cli-1.1.1 → stage_cli-1.1.3}/src/stage/data/companies/h.yaml

@@ -11,6 +11,8 @@
   slug: haizelabs
   source_of_record: discover
   last_verified: &id004 2026-08-14
+  enabled: false
+  notes: '2026-09-09: greenhouse/haizelabs 404s and their board page 500s; no ashby or lever board exists'
 - name: Halcyon
   platform: greenhouse
   slug: halcyon

{stage_cli-1.1.1 → stage_cli-1.1.3}/src/stage/data/companies/o.yaml

@@ -43,9 +43,8 @@
   source_of_record: discover
   last_verified: &id004 2026-08-14
   name_gate_exempt: true
-  notes: '2026-08-14: board token taken from this employer''s own application URL
-    in a feed posting, not from slug guessing; ashby publishes no board name, so the
-    name gate cannot confirm it and provenance is the evidence (12 job(s))'
+  enabled: false
+  notes: '2026-09-09: ashby/odin-dynamics 404s while the ashby API is healthy; the employer removed the board'
 - name: Off world studios
   platform: bamboohr
   slug: owi

{stage_cli-1.1.1 → stage_cli-1.1.3}/src/stage/domain/__init__.py

@@ -65,6 +65,7 @@ from stage.domain.filters import DEFAULT_LIMIT, DEFAULT_WINDOW_DAYS, JobFilters
 from stage.domain.health import (
     MIN_VOLUME_HISTORY,
     STALE_AFTER_DAYS,
+    UNRECORDED_FETCH,
     UNRECORDED_VOLUME,
     VOLUME_DROP_RATIO,
     IntegrityFinding,
@@ -210,6 +211,7 @@ __all__ = [
     "rotate",
     "MIN_VOLUME_HISTORY",
     "STALE_AFTER_DAYS",
+    "UNRECORDED_FETCH",
     "UNRECORDED_VOLUME",
     "VOLUME_DROP_RATIO",
     "IntegrityFinding",

{stage_cli-1.1.1 → stage_cli-1.1.3}/src/stage/domain/health.py

@@ -7,6 +7,7 @@ MIN_VOLUME_HISTORY = 3
 VOLUME_DROP_RATIO = 0.5
 STALE_AFTER_DAYS = 14
 UNRECORDED_VOLUME = -1
+UNRECORDED_FETCH = -1
 
 
 class VolumeVerdict(StrEnum):
@@ -27,10 +28,21 @@ class VolumePoint:
     stored: int
     deferred: int = 0
     blocked: bool = False
+    fetched: int = UNRECORDED_FETCH
+    requests: int = UNRECORDED_FETCH
+    not_modified: int = UNRECORDED_FETCH
+
+    @property
+    def ran(self) -> bool:
+        return self.fetched != 0 or self.requests != 0 or self.not_modified != 0
+
+    @property
+    def rotated(self) -> bool:
+        return self.deferred > 0
 
     @property
     def is_evidence(self) -> bool:
-        return self.stored > UNRECORDED_VOLUME and self.deferred == 0 and not self.blocked
+        return self.stored > UNRECORDED_VOLUME and not self.blocked and self.ran
 
 
 @dataclass(frozen=True, slots=True)
@@ -59,8 +71,9 @@ def assess_volume(source: str, history: list[VolumePoint]) -> VolumeSignal:
             detail=_unproven_reason(history),
         )
 
-    latest = evidence[0].stored
-    prior = [point.stored for point in evidence[1:]]
+    newest = evidence[0]
+    latest = newest.stored
+    prior = [point.stored for point in evidence[1:] if point.rotated == newest.rotated]
     if len(prior) < MIN_VOLUME_HISTORY:
         return VolumeSignal(
             source=source,
@@ -114,10 +127,10 @@ def assess_volume(source: str, history: list[VolumePoint]) -> VolumeSignal:
 def _unproven_reason(history: list[VolumePoint]) -> str:
     if not history:
         return "no runs on record"
-    if any(point.blocked for point in history):
+    if not any(point.ran for point in history):
+        return "no run fetched this source, so none of them can show a drop"
+    if all(point.blocked for point in history if point.ran):
         return "every run was blocked, which is a throttle not a drop"
-    if any(point.deferred for point in history):
-        return "every run deferred members, so rotation explains it"
     return "no run has recorded a stored count yet"
 
 
@@ -157,6 +170,7 @@ class IntegrityFinding:
 __all__ = [
     "MIN_VOLUME_HISTORY",
     "STALE_AFTER_DAYS",
+    "UNRECORDED_FETCH",
     "UNRECORDED_VOLUME",
     "VOLUME_DROP_RATIO",
     "IntegrityFinding",

{stage_cli-1.1.1 → stage_cli-1.1.3}/src/stage/http/client.py

@@ -1,6 +1,7 @@
 import asyncio
 import json
 import random
+import ssl
 import time
 from collections.abc import Mapping
 from dataclasses import dataclass, field
@@ -38,6 +39,7 @@ RETRYABLE_STATUSES = frozenset({429, 500, 502, 503, 504})
 BLOCKING_STATUSES = frozenset({401, 403})
 BLOCKED_COOLDOWN_S = 1800.0
 DENIED_HOSTS_BEFORE_BLOCK = 2
+TLS12_ONLY_HOSTS = frozenset({"www.jobbank.gc.ca"})
 MAX_REDIRECTS = 3
 ORIGIN_BOUND_HEADERS = frozenset(
     {"authorization", "cookie", "origin", "referer", "proxy-authorization", "x-csrf-token"}
@@ -229,6 +231,25 @@ class HostBudget:
         return state
 
 
+def _tls12_context() -> ssl.SSLContext:
+    context = httpx.create_ssl_context()
+    context.maximum_version = ssl.TLSVersion.TLSv1_2
+    return context
+
+
+def _describe(exc: BaseException) -> str:
+    detail = str(exc)
+    seen = {id(exc)}
+    cause = exc.__cause__ or exc.__context__
+    while not detail and cause is not None and id(cause) not in seen:
+        detail = str(cause)
+        seen.add(id(cause))
+        if detail:
+            return f"{type(exc).__name__}: {type(cause).__name__}: {detail}"
+        cause = cause.__cause__ or cause.__context__
+    return f"{type(exc).__name__}: {detail}"
+
+
 def _origin_of(url: httpx.URL) -> tuple[str, str, int | None]:
     return (url.scheme, (url.host or "").lower(), url.port)
 
@@ -269,11 +290,19 @@ class HttpClient:
             for bucket, state in self._rate_state.items()
             if state.is_blocked(self._now)
         }
+        mounts: dict[str, httpx.AsyncBaseTransport] | None = None
+        if transport is None:
+            capped = self._allowed_hosts & TLS12_ONLY_HOSTS
+            mounts = {
+                f"https://{host}": httpx.AsyncHTTPTransport(verify=_tls12_context())
+                for host in sorted(capped)
+            } or None
         self._client = httpx.AsyncClient(
             timeout=timeout or DEFAULT_TIMEOUT,
             headers={"User-Agent": USER_AGENT, "Accept": "application/json"},
             follow_redirects=False,
             transport=transport,
+            mounts=mounts or {},
         )
 
     async def __aenter__(self) -> Self:
@@ -556,7 +585,7 @@ class HttpClient:
                     status=None,
                     elapsed_ms=(time.perf_counter() - started) * 1000,
                     attempt=attempt,
-                    error=f"{type(exc).__name__}: {exc}",
+                    error=_describe(exc),
                 )
             )
             raise
@@ -564,7 +593,7 @@ class HttpClient:
             elapsed = (time.perf_counter() - started) * 1000
             budget.metrics.failures += 1
             budget.breaker.record_failure()
-            budget.last_error = f"{type(exc).__name__}: {exc}"
+            budget.last_error = _describe(exc)
             self._log.append(
                 RequestRecord(
                     method=method,
@@ -572,7 +601,7 @@ class HttpClient:
                     status=None,
                     elapsed_ms=elapsed,
                     attempt=attempt,
-                    error=f"{type(exc).__name__}: {exc}",
+                    error=_describe(exc),
                 )
             )
             raise

{stage_cli-1.1.1 → stage_cli-1.1.3}/src/stage/storage/sqlite_repo.py

@@ -1381,7 +1381,8 @@ class SqliteRepository:
 
     def volume_history(self, limit: int) -> Mapping[str, list[VolumePoint]]:
         rows = self._conn.execute(
-            "SELECT source, stored, deferred, blocked FROM sync_run_sources "
+            "SELECT source, stored, deferred, blocked, fetched, requests, not_modified "
+            "FROM sync_run_sources "
             "WHERE run_id IN (SELECT id FROM sync_runs ORDER BY id DESC LIMIT ?) "
             "ORDER BY run_id DESC",
             (limit,),
@@ -1393,6 +1394,9 @@ class SqliteRepository:
                     stored=int(row["stored"]),
                     deferred=int(row["deferred"]),
                     blocked=bool(row["blocked"]),
+                    fetched=int(row["fetched"]),
+                    requests=int(row["requests"]),
+                    not_modified=int(row["not_modified"]),
                 )
             )
         return history

{stage_cli-1.1.1 → stage_cli-1.1.3}/tests/test_health.py

@@ -58,6 +58,50 @@ def test_a_blocked_run_cannot_raise_a_volume_alert() -> None:
     assert signal.verdict is not VolumeVerdict.COLLAPSED, "a throttle is not drift"
 
 
+def _idle(count: int) -> list[VolumePoint]:
+    return [VolumePoint(stored=0, fetched=0, requests=0, not_modified=0)] * count
+
+
+def _ran(*stored: int) -> list[VolumePoint]:
+    return [VolumePoint(stored=value, fetched=value, requests=4) for value in stored]
+
+
+def test_a_source_left_out_of_a_run_is_not_a_source_that_collapsed() -> None:
+    signal = assess_volume("greenhouse", _idle(1) + _ran(74, 74, 74, 74))
+    assert signal.verdict is not VolumeVerdict.COLLAPSED
+
+
+def test_a_source_left_out_of_a_run_cannot_drag_the_baseline_down() -> None:
+    signal = assess_volume("greenhouse", _ran(138) + _idle(3) + _ran(231, 223, 219))
+    assert signal.verdict is VolumeVerdict.HEALTHY
+    assert signal.samples == 3
+
+
+def test_a_source_that_never_ran_proves_nothing() -> None:
+    signal = assess_volume("ashby", _idle(5))
+    assert signal.verdict is VolumeVerdict.UNPROVEN
+    assert "fetched" in signal.detail
+
+
+def test_a_source_that_fetched_rows_and_stored_none_still_collapses() -> None:
+    live = VolumePoint(stored=0, fetched=44, requests=1)
+    signal = assess_volume("quebec-emploi", [live] + _ran(40, 41, 40))
+    assert signal.verdict is VolumeVerdict.COLLAPSED
+
+
+def test_a_source_blocked_on_every_run_is_a_throttle_not_a_drop() -> None:
+    history = [VolumePoint(stored=0, blocked=True, requests=4)] * 4
+    signal = assess_volume("workday", history)
+    assert signal.verdict is VolumeVerdict.UNPROVEN
+    assert "throttle" in signal.detail
+
+
+def test_a_run_that_was_all_cache_hits_still_counts_as_having_run() -> None:
+    cached = VolumePoint(stored=0, fetched=0, requests=0, not_modified=12)
+    signal = assess_volume("lever", [cached] + _ran(40, 41, 40))
+    assert signal.verdict is VolumeVerdict.COLLAPSED
+
+
 def test_a_run_predating_the_stored_column_is_not_a_baseline_of_zero() -> None:
     history = [VolumePoint(stored=12)] + _points(*([UNRECORDED_VOLUME] * 6))
     signal = assess_volume("greenhouse", history)
@@ -143,7 +187,7 @@ async def test_doctor_names_the_source_whose_volume_collapsed(db_path: Path) ->
                     started_at=NOW,
                     finished_at=NOW,
                     outcome=SyncOutcome.SUCCESS,
-                    sources=(SourceRunStats(source="lever", stored=stored),),
+                    sources=(SourceRunStats(source="lever", stored=stored, requests=4),),
                 )
             )
         report = await doctor(repository, now=NOW)

{stage_cli-1.1.1 → stage_cli-1.1.3}/tests/test_http_client.py

@@ -1,4 +1,5 @@
 import asyncio
+import ssl
 import time
 from collections.abc import AsyncIterator
 
@@ -7,7 +8,7 @@ import pytest
 import respx
 
 from stage.http import HostBudgetExceededError, HttpClient, RatePosture
-from stage.http.client import USER_AGENT
+from stage.http.client import USER_AGENT, _describe, _tls12_context
 
 ENDPOINT = "https://boards-api.greenhouse.io/v1/boards/acme/jobs"
 
@@ -328,3 +329,44 @@ async def test_a_plain_http_url_is_refused_before_it_is_sent() -> None:
     ) as client:
         with pytest.raises(RedirectNotAllowedError):
             await client.get_json("http://one.example.test/jobs")
+
+
+def test_a_tls12_only_host_gets_a_capped_transport() -> None:
+    client = HttpClient(allowed_hosts=frozenset({"www.jobbank.gc.ca"}))
+    mounted = client._client._mounts
+    assert any(key.pattern.endswith("www.jobbank.gc.ca") for key in mounted)
+
+
+def test_an_ordinary_host_keeps_the_default_transport() -> None:
+    client = HttpClient(allowed_hosts=frozenset({"boards-api.greenhouse.io"}))
+    assert not client._client._mounts
+
+
+def test_the_capped_context_still_verifies_certificates() -> None:
+    context = _tls12_context()
+    assert context.maximum_version is ssl.TLSVersion.TLSv1_2
+    assert context.verify_mode is ssl.CERT_REQUIRED
+    assert context.check_hostname
+
+
+def test_an_injected_transport_is_never_overridden() -> None:
+    transport = httpx.MockTransport(lambda _: httpx.Response(200))
+    client = HttpClient(allowed_hosts=frozenset({"www.jobbank.gc.ca"}), transport=transport)
+    assert not client._client._mounts
+
+
+def test_an_empty_error_reports_its_underlying_cause() -> None:
+    try:
+        try:
+            raise ConnectionResetError(54, "Connection reset by peer")
+        except OSError as inner:
+            raise httpx.ConnectError("") from inner
+    except httpx.ConnectError as exc:
+        described = _describe(exc)
+    assert described == "ConnectError: ConnectionResetError: [Errno 54] Connection reset by peer"
+
+
+def test_an_error_that_speaks_for_itself_is_unchanged() -> None:
+    assert _describe(httpx.ConnectError("all attempts failed")) == (
+        "ConnectError: all attempts failed"
+    )

{stage_cli-1.1.1 → stage_cli-1.1.3}/uv.lock

@@ -531,11 +531,11 @@ wheels = [
 
 [[package]]
 name = "platformdirs"
-version = "4.11.5"
+version = "4.11.7"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/ea/06/cf1564dcc2e2261c8c8c6c05628dc8b418943bdae2a4e58640ceb2f770fa/platformdirs-4.11.5.tar.gz", hash = "sha256:e8b31f4f8bcbbedef91a6b57a706255e4f148d2a4e01648382a0a47342539173", size = 34823, upload-time = "2026-08-27T21:36:37.46Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/69/b7/802a56eca9f2fac455b8bab5375a2647b0f0e14a2cd63ef077de3c4a7658/platformdirs-4.11.7.tar.gz", hash = "sha256:4f41487eeeeeb07f3a6625e61d9bc0ae6809f92d3386dbd74392fbb76108104d", size = 35127, upload-time = "2026-09-01T13:35:10.502Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c7/12/6f3fcd5067a9cbf4f8664b32957973498da8b083455203c8d9cab83a725c/platformdirs-4.11.5-py3-none-any.whl", hash = "sha256:89f8d42695853b89c7170bd49bc3dc593f98a71e695ede88e06a3b247bc4563b", size = 23900, upload-time = "2026-08-27T21:36:36.227Z" },
+    { url = "https://files.pythonhosted.org/packages/27/6e/80993e10a0482f630cef528635789233224f36b1ffd11592aa15d13ff9ce/platformdirs-4.11.7-py3-none-any.whl", hash = "sha256:8a02cb259042c79d1cd0450facc2fe6dc9d303ae7901afbe33bf8ea0b188cef6", size = 23938, upload-time = "2026-09-01T13:35:09.02Z" },
 ]
 
 [[package]]
@@ -775,27 +775,27 @@ wheels = [
 
 [[package]]
 name = "ruff"
-version = "0.16.5"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/f3/85/c8e12473c93018f92d19dd988a294202e1c27426c47ec4de53ffb847b8d8/ruff-0.16.5.tar.gz", hash = "sha256:1b88500f9ffbcab3dedb0082c9f9492e91ec3d618aac1236a3e0189938f7040b", size = 4912003, upload-time = "2026-08-27T16:34:18.258Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/c6/b6/77c90a970fe2dae17a723acbd011043ea97c98d7deacccefdc4ba74ec512/ruff-0.16.5-py3-none-linux_armv6l.whl", hash = "sha256:12e5f673e774c35fbb62f288809c7653b73445f8ecec6b6063fd6ea3521aa14b", size = 10011941, upload-time = "2026-08-27T16:33:41.287Z" },
-    { url = "https://files.pythonhosted.org/packages/4b/46/6cf67cf6411885a1d6f7f6d801682f155536a85176d10b605e2ceffed8bd/ruff-0.16.5-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:eda58a5802de40e7ed5b32b64e0b32539338cc6fcd2c78f61e3ad6a0d79f51c3", size = 10204049, upload-time = "2026-08-27T16:33:44.056Z" },
-    { url = "https://files.pythonhosted.org/packages/46/fd/c8720ca7a090abf0c2fef4abe8a5ef6e5127ed15196d8886ff75a2b370e2/ruff-0.16.5-py3-none-macosx_11_0_arm64.whl", hash = "sha256:c5ae9a7b9a8875131f40f8fe967cc86abf899779efd663cb7ce3d572d01da7eb", size = 9809037, upload-time = "2026-08-27T16:33:46.257Z" },
-    { url = "https://files.pythonhosted.org/packages/43/45/a684caacdedaca180f52bacccc40bf0789d2c5a7c75f25324853e9eaedb5/ruff-0.16.5-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7b719b0a1f4d59710d283ab2965f621684a108a9e41da622e3b23f0326cd0025", size = 9964129, upload-time = "2026-08-27T16:33:48.352Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/f2/5d2bcdaca6b5b93d1b4dfc166cd2aebf7680143a1b38a28759df13a94d31/ruff-0.16.5-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:2298f2780ed1be0c5cb1361e32ab7b1467f3cce7dabe101d2210a314f2fe42e9", size = 9821518, upload-time = "2026-08-27T16:33:50.57Z" },
-    { url = "https://files.pythonhosted.org/packages/aa/ff/011cce29accf9257d5974145b733fc653a37985ed6825413a3987cefbfe0/ruff-0.16.5-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:258f29035a2dd021e7861e631b227a5b3f14e50c1184c9a6a122c5f4576154d7", size = 10534835, upload-time = "2026-08-27T16:33:52.522Z" },
-    { url = "https://files.pythonhosted.org/packages/d7/5a/f0cf109bada9bba0e96c90c21c9f9251803f57225c32d293327a03c710d6/ruff-0.16.5-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:b9a4f0432966834019c74d1b7e5c51224305d7713f3d7faf3e7451f1a3be3cde", size = 11252550, upload-time = "2026-08-27T16:33:54.521Z" },
-    { url = "https://files.pythonhosted.org/packages/63/4d/1d481aaea2046c6a7ed7c291f9004c669cce3c087b6b376ed5b08271e3fe/ruff-0.16.5-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:b5eb3a8c3d0ade9cea42b591fd530368e8798380e30e0a308b85a5cf718f09ea", size = 10777949, upload-time = "2026-08-27T16:33:56.88Z" },
-    { url = "https://files.pythonhosted.org/packages/ee/34/ee245ca55f64443233034b3d02b03236b19242004281247c079390b7facd/ruff-0.16.5-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:ef0f69e191a13a3c9816f63163c88790cb12cd157bbbb384e9c44745702ab105", size = 10311656, upload-time = "2026-08-27T16:33:59.12Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/4d/c33a333e341c0a2b96c715b52d89a606f5a34cd4ac493cd9b8d0187186b8/ruff-0.16.5-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:0eeab41fbea2c42f98dfb9822cdccda9d24ba38d49f6dc945b5c236d48f0ef29", size = 10532125, upload-time = "2026-08-27T16:34:01.166Z" },
-    { url = "https://files.pythonhosted.org/packages/30/e1/a64cef78b40192497bb98a27a8aa8f2c98ee9ee15bc97f7712d94ef32937/ruff-0.16.5-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:f0768e9df4300713fff30733c87575f68b6f1d8de41184e505b7fdd9c0c95eaf", size = 10097648, upload-time = "2026-08-27T16:34:03.16Z" },
-    { url = "https://files.pythonhosted.org/packages/cc/4e/4cdc9ed3c3e109d2f71e62572a37457298d7bc7501ec3138babb7ed32bbd/ruff-0.16.5-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:95cc70cdc7aa80c338de356279d2adbeb2de0f520b9ecd8aba75b94e95e02f91", size = 9829344, upload-time = "2026-08-27T16:34:05.134Z" },
-    { url = "https://files.pythonhosted.org/packages/39/4a/31ed35ce31729955fc583ee0d176d6e784c1290cb0b0a75cb2134c1ab72a/ruff-0.16.5-py3-none-musllinux_1_2_i686.whl", hash = "sha256:d185c8398ded1bfd91c0c2cb258346307571eccc473a8490af8c3977399c384a", size = 10277117, upload-time = "2026-08-27T16:34:07.425Z" },
-    { url = "https://files.pythonhosted.org/packages/a8/a0/60356d86687b4b666d593df213f4dc3041750d024cb7bf2cfa81cfd65c2e/ruff-0.16.5-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:fb8e3a3c4c6a784150a7ced53b015f4b253fc2bf97a610886419ead64b4756ef", size = 10711653, upload-time = "2026-08-27T16:34:09.712Z" },
-    { url = "https://files.pythonhosted.org/packages/ed/20/656d67f5b25ca9bda4e02b1de25867b2954e1d19e03648060f167ad0f4cc/ruff-0.16.5-py3-none-win32.whl", hash = "sha256:288b0a5f080492fe5635db849f9e2e84aa3cce7b7f0e955997d416c507c76a26", size = 10034250, upload-time = "2026-08-27T16:34:11.8Z" },
-    { url = "https://files.pythonhosted.org/packages/5b/42/ee8e68a207b9127fcde6c3d7e197def432f346cb1af159e1fa14ca0d1cdc/ruff-0.16.5-py3-none-win_amd64.whl", hash = "sha256:ddc6385fb2137f616357ca03d6c74f4be987f80fed4008566b754f6032b8546f", size = 10516714, upload-time = "2026-08-27T16:34:13.963Z" },
-    { url = "https://files.pythonhosted.org/packages/73/e3/7df5a396e445b9ba49ce9a9437439a4d80042c61c0ade199abf8d16de1ac/ruff-0.16.5-py3-none-win_arm64.whl", hash = "sha256:a64abe90968719b851bb7cedffaa8753fbdbdadab483089682db623f3edc587e", size = 10391564, upload-time = "2026-08-27T16:34:16.064Z" },
+version = "0.16.6"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/a4/7c/6adb35d70e7c027e308274557901c7e00fb3407750faf3620c184ae058cb/ruff-0.16.6.tar.gz", hash = "sha256:dcf8a73d2ff77e99dde91244b4da16feba7f14e6beeb4015dee7c5a909e99050", size = 4921251, upload-time = "2026-09-03T16:57:29.037Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/a4/28/9cc1b79639e284ec103f43c88c644db4eb58cbd0ea1ca11f1193435369ac/ruff-0.16.6-py3-none-linux_armv6l.whl", hash = "sha256:61c368c26bf8e973e5ab14a2772de587bc068ea3f9a277f673380749b4898fb8", size = 10015638, upload-time = "2026-09-03T16:56:40.986Z" },
+    { url = "https://files.pythonhosted.org/packages/71/11/627d342ef727ea7794edf74fe23d60a074b02c3acc2e9436684e782286ca/ruff-0.16.6-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:ecf4f068e2e123e43a26e9db4e19524cc56563912404e83bbfca375757e45a32", size = 10220762, upload-time = "2026-09-03T16:56:44.681Z" },
+    { url = "https://files.pythonhosted.org/packages/43/d9/b75668ce41e4c8d073d18d6d08672ba6906ce45d5c06ea4fdb2e84ce3853/ruff-0.16.6-py3-none-macosx_11_0_arm64.whl", hash = "sha256:99b62ea33baf130f50368798d841f0d95527b6d817bf31817b65dd058f1d314c", size = 9835082, upload-time = "2026-09-03T16:56:47.142Z" },
+    { url = "https://files.pythonhosted.org/packages/99/97/123ab10b05cde889c107c20f5a9774955104b5552796a2a8584b089ae8eb/ruff-0.16.6-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7fbf89013f2bb3f6835a6038ff658dc8a1b38c98dc8e724b964168ad4e881876", size = 9949304, upload-time = "2026-09-03T16:56:49.813Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/58/a4a2c59dd2e5b85929c912d9cac3056eb9ee8c7e75e9b9fe3e109174966b/ruff-0.16.6-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:56a67065e22efa6bc4d498299d3bb06c0c90aace8fac2068b5a12f9dc4d8d51d", size = 9840612, upload-time = "2026-09-03T16:56:52.368Z" },
+    { url = "https://files.pythonhosted.org/packages/61/6a/ff8c8626a786c4f49d48ced4a752dadbca65f5263005f9c2416578194694/ruff-0.16.6-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:e25cc89174874b176a157e4428d66761c2c0c006654419bf384f967f361ff1b1", size = 10543465, upload-time = "2026-09-03T16:56:55.089Z" },
+    { url = "https://files.pythonhosted.org/packages/ad/bb/c47535923365f337b82e28192e4e9eef2176511007cfd99a62fc22df5dad/ruff-0.16.6-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:0700580ed5303723cb3c11c2f1d2a8913ce77b7ea86646dddb887f5417a9ba70", size = 11267576, upload-time = "2026-09-03T16:56:57.791Z" },
+    { url = "https://files.pythonhosted.org/packages/ba/50/e5119a5212b5cd63b51e1f4b25e7bd636a6668fc069a3160b108ad7e3c16/ruff-0.16.6-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:15f1d0b6e165a6e56567befb6629f8209271311d990bae0f37e6d065035ef5f3", size = 10781993, upload-time = "2026-09-03T16:57:00.666Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/98/083d8b4ef3c51a0d19db84367791cbe9f44e4b53343d19dfa83556e1cd9a/ruff-0.16.6-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d72c591a96986ee4268860e2b7235082129ca5e4cb9cbba653a4b57c11893757", size = 10317748, upload-time = "2026-09-03T16:57:03.428Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/29/68f7ff2c5ad95f19f00627ac2de95644e25fe47371ea60b2db1fd952315e/ruff-0.16.6-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:65a006baa18f33324325814c864daef03541d51564b98c517610ea756ab7003e", size = 10540096, upload-time = "2026-09-03T16:57:06.182Z" },
+    { url = "https://files.pythonhosted.org/packages/c4/f9/79a8f6de85968641d68a7863aeec577551924ef066a990a48ff93167beab/ruff-0.16.6-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:cd02a7bf1a21a8735228a3e8c95a9dc5cf86bd2a52194f4aaae2a5755b4de0f4", size = 10100494, upload-time = "2026-09-03T16:57:09.194Z" },
+    { url = "https://files.pythonhosted.org/packages/d9/e8/b81a22d9b90c00b892ccf2fa2ac36fa95de4c13ab85aea3e73795cfe4651/ruff-0.16.6-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:31b36f1e5ad85e0737f09d2be4e512e2e283583c14015da3b9dc07359ac0fc88", size = 9843663, upload-time = "2026-09-03T16:57:12.168Z" },
+    { url = "https://files.pythonhosted.org/packages/39/aa/54f516ec5e5a11c4afdceb1c454ebb054ffb96e4f4a1705580b4346abd35/ruff-0.16.6-py3-none-musllinux_1_2_i686.whl", hash = "sha256:61029b4ab4aa723fd3064fab96b1d814492596bf0c792679fffcbde1e1679953", size = 10282461, upload-time = "2026-09-03T16:57:15.077Z" },
+    { url = "https://files.pythonhosted.org/packages/52/0b/38d0aa8aa32372b96dc44f97b22e576c4147808271aab7b2cb1e353d4445/ruff-0.16.6-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:9ac8998457832c2061709d900856b7ad271dace0cb41f346588d540162bfa718", size = 10728808, upload-time = "2026-09-03T16:57:17.797Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/e5/9e274e24eeb027640ffc7442f21239f16d17f47acec15ae34f32e03a5c79/ruff-0.16.6-py3-none-win32.whl", hash = "sha256:0b87d9d16fcb63e8018423ca1d50b7260f15cb2da33e30db4baad4183a948c25", size = 10049212, upload-time = "2026-09-03T16:57:20.55Z" },
+    { url = "https://files.pythonhosted.org/packages/22/31/72472449414223ed1a2da236b992adbb1a2ae59e34794574810f60ce068e/ruff-0.16.6-py3-none-win_amd64.whl", hash = "sha256:10d21c51c3495d8eaea7b703a16592117ea6eb1d649e36335aa965ff1173eb39", size = 10556402, upload-time = "2026-09-03T16:57:23.501Z" },
+    { url = "https://files.pythonhosted.org/packages/fc/07/d781f8f8e1ac24bef9f3269cf62ffb1407ca24c3a8f12e5e22874f90528c/ruff-0.16.6-py3-none-win_arm64.whl", hash = "sha256:7a976c79b958f94e50a022a19f0f8c87387448020935ec14fc74331bd0a7f2c5", size = 10412850, upload-time = "2026-09-03T16:57:26.416Z" },
 ]
 
 [[package]]

stage_cli-1.1.1/src/stage/__init__.py

@@ -1 +0,0 @@
-__version__ = "1.1.1"